freebsd-dev/sys/contrib
Daniel Hartmeier 8092705059 IPv6 packets can contain headers (like options) before the TCP/UDP/ICMP6
header. pf finds the first TCP/UDP/ICMP6 header to filter by traversing
the header chain. In the case where headers are skipped, the protocol
checksum verification used the wrong length (included the skipped headers),
leading to incorrectly mismatching checksums. Such IPv6 packets with
headers were silently dropped.

Discovered by:	Bernhard Schmidt
MFC after:	1 week
2004-12-05 12:15:43 +00:00
..
altq/altq
dev This commit was generated by cvs2svn to compensate for changes in r138298, 2004-12-02 00:12:19 +00:00
ia64/libuwx
ipfilter/netinet Add an additional struct inpcb * argument to pfil(9) in order to enable 2004-09-29 04:54:33 +00:00
ngatm Exclusion list for easier import. 2004-08-11 12:25:09 +00:00
pf IPv6 packets can contain headers (like options) before the TCP/UDP/ICMP6 2004-12-05 12:15:43 +00:00